This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/e7c49c-b6d0-45de-bfba-3eaa034a8978/1/K3jNyhYWw8a18ZH8M6k0eJsSwGk.mft File: K3jNyhYWw8a18ZH8M6k0eJsSwGk.mft (raw, json) Hash identifier: SKkMqaClb2n3VEssvRexpjrPuUzzJJ7X4idiL1ffW+w= Subject key identifier: 46:B4:D8:59:21:51:DD:75:57:D7:C7:A8:9A:29:B4:29:3A:6B:DF:E5 Authority key identifier: 2B:78:CD:CA:16:16:C3:C6:B5:F1:91:FC:33:A9:34:78:9B:12:C0:69 Certificate issuer: /CN=2b78cdca1616c3c6b5f191fc33a934789b12c069 Certificate serial: 019B3CB4F9E1A7EBB552D6655C00E2B06E94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K3jNyhYWw8a18ZH8M6k0eJsSwGk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/e7c49c-b6d0-45de-bfba-3eaa034a8978/1/K3jNyhYWw8a18ZH8M6k0eJsSwGk.mft Manifest number: 03F9 Signing time: Sat 20 Dec 2025 17:00:51 +0000 Manifest this update: Sat 20 Dec 2025 17:00:51 +0000 Manifest next update: Sun 21 Dec 2025 17:00:51 +0000 Files and hashes: 1: K3jNyhYWw8a18ZH8M6k0eJsSwGk.crl (hash: mVQTH8puTefhZmSn1OXdxM+DLNuZsYE56JHs3U2c0bU=) 2: cRNU9mqjTuLyrs64AbQG-Q8lS_M.roa (hash: gATqx8bTowXwaPkDc2Os+EOXUJAixbB51eSVdjtnNog=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/e7c49c-b6d0-45de-bfba-3eaa034a8978/1/K3jNyhYWw8a18ZH8M6k0eJsSwGk.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/e7c49c-b6d0-45de-bfba-3eaa034a8978/1/K3jNyhYWw8a18ZH8M6k0eJsSwGk.mft rsync://rpki.ripe.net/repository/DEFAULT/K3jNyhYWw8a18ZH8M6k0eJsSwGk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:b4:f9:e1:a7:eb:b5:52:d6:65:5c:00:e2:b0:6e:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b78cdca1616c3c6b5f191fc33a934789b12c069 Validity Not Before: Dec 20 17:00:51 2025 GMT Not After : Dec 21 17:00:51 2025 GMT Subject: CN=46b4d8592151dd7557d7c7a89a29b4293a6bdfe5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:9b:44:8c:d2:23:51:51:e5:bc:85:e8:7c:56: 71:ce:e5:8d:fa:87:14:8d:50:be:ea:e3:d5:c8:9d: 8d:73:bd:74:90:53:7e:92:b0:ad:21:c5:6f:98:5b: f3:e6:67:8b:43:8d:2e:97:2e:71:3e:a3:9e:8f:4c: 9b:ac:38:64:6f:7a:f9:87:19:b6:db:dd:93:67:1b: 52:6a:a6:bf:f6:4a:68:00:f8:5c:fc:1c:6a:95:47: fb:74:8d:e4:9e:79:c5:81:43:2a:a3:7e:b2:ff:00: 33:44:0f:10:9a:0c:a0:77:79:54:84:24:03:b4:f0: f0:87:4e:47:5d:73:5a:c3:a8:32:77:e0:ef:28:5a: dd:10:32:34:11:b4:5b:6d:86:ca:0f:6b:a2:80:21: 54:74:57:f7:af:c4:39:df:8b:05:c8:99:22:05:9b: fb:ea:4b:af:34:c7:93:ff:28:58:a9:30:95:c4:40: d8:5a:46:fb:4b:75:6f:23:6d:fc:cd:ad:ed:c0:19: 2b:f0:62:1d:c5:75:5b:dd:85:97:da:d2:ae:48:c5: 33:a0:28:4d:47:06:bb:90:0c:8d:1e:19:ac:b8:bf: 82:02:f1:f0:e0:64:83:8f:de:33:13:53:16:fa:23: e7:c8:e4:aa:60:c1:e1:7c:8b:e1:94:f5:8a:57:b7: 01:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:B4:D8:59:21:51:DD:75:57:D7:C7:A8:9A:29:B4:29:3A:6B:DF:E5 X509v3 Authority Key Identifier: keyid:2B:78:CD:CA:16:16:C3:C6:B5:F1:91:FC:33:A9:34:78:9B:12:C0:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K3jNyhYWw8a18ZH8M6k0eJsSwGk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e7c49c-b6d0-45de-bfba-3eaa034a8978/1/K3jNyhYWw8a18ZH8M6k0eJsSwGk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e7c49c-b6d0-45de-bfba-3eaa034a8978/1/K3jNyhYWw8a18ZH8M6k0eJsSwGk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:20:a8:53:ec:8c:db:ba:ef:20:87:21:7f:0b:05:9a:50:35: 95:60:e9:c7:65:cf:6c:a4:9f:63:46:8d:33:3c:66:01:9a:8f: 29:a9:7d:44:fe:14:7e:ef:6e:8b:66:47:10:2c:c8:a6:61:d2: 74:70:e6:03:16:a6:53:c3:1b:a7:02:09:f7:07:18:1f:7b:de: 3d:f4:b9:24:a2:f4:98:29:c6:b5:43:bb:9e:c4:48:7f:e5:ce: cb:5b:3c:8a:d3:75:54:eb:81:c4:ae:36:f3:39:dd:d8:fa:1e: 4f:a5:0d:aa:01:20:e2:9b:b4:b6:e8:d4:f2:37:ed:a4:1b:44: 11:1e:75:eb:9c:38:ae:95:97:00:f1:3d:8c:13:d4:de:7e:9a: a1:84:dd:80:ae:78:a5:34:8e:e2:37:73:ab:1d:f4:bc:ac:54: da:bd:e8:f0:38:0a:96:62:ff:12:37:b0:73:f9:f0:2b:09:0f: bc:14:87:20:62:01:d2:ab:85:fb:9d:42:56:26:7d:40:3f:98: 28:2b:80:5a:63:7a:51:01:ed:da:eb:a4:c6:a4:a7:e1:6e:2d: db:9f:d0:4a:39:be:74:17:cf:17:d7:13:79:70:3b:90:bb:33: c4:c5:8f:a5:16:2e:bd:b7:13:e0:a7:7d:ce:a9:50:e3:2f:4d: e4:de:45:29 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8tPnhp+u1UtZlXADisG6UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiNzhjZGNhMTYxNmMzYzZiNWYxOTFmYzMzYTkzNDc4OWIx MmMwNjkwHhcNMjUxMjIwMTcwMDUxWhcNMjUxMjIxMTcwMDUxWjAzMTEwLwYDVQQD Eyg0NmI0ZDg1OTIxNTFkZDc1NTdkN2M3YTg5YTI5YjQyOTNhNmJkZmU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy5tEjNIjUVHlvIXofFZxzuWN+ocU jVC+6uPVyJ2Nc710kFN+krCtIcVvmFvz5meLQ40uly5xPqOej0ybrDhkb3r5hxm2 292TZxtSaqa/9kpoAPhc/BxqlUf7dI3knnnFgUMqo36y/wAzRA8Qmgygd3lUhCQD tPDwh05HXXNaw6gyd+DvKFrdEDI0EbRbbYbKD2uigCFUdFf3r8Q534sFyJkiBZv7 6kuvNMeT/yhYqTCVxEDYWkb7S3VvI238za3twBkr8GIdxXVb3YWX2tKuSMUzoChN Rwa7kAyNHhmsuL+CAvHw4GSDj94zE1MW+iPnyOSqYMHhfIvhlPWKV7cBiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEa02FkhUd11V9fHqJoptCk6a9/lMB8GA1UdIwQY MBaAFCt4zcoWFsPGtfGR/DOpNHibEsBpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSzNqTnloWVd3OGExOFpIOE02azBlSnNTd0drLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9lN2M0OWMtYjZkMC00NWRlLWJmYmEt M2VhYTAzNGE4OTc4LzEvSzNqTnloWVd3OGExOFpIOE02azBlSnNTd0drLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9lN2M0OWMtYjZkMC00NWRlLWJmYmEtM2VhYTAzNGE4OTc4 LzEvSzNqTnloWVd3OGExOFpIOE02azBlSnNTd0drLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeiCoU+yM 27rvIIchfwsFmlA1lWDpx2XPbKSfY0aNMzxmAZqPKal9RP4Ufu9ui2ZHECzIpmHS dHDmAxamU8MbpwIJ9wcYH3vePfS5JKL0mCnGtUO7nsRIf+XOy1s8itN1VOuBxK42 8znd2PoeT6UNqgEg4pu0tujU8jftpBtEER5165w4rpWXAPE9jBPU3n6aoYTdgK54 pTSO4jdzqx30vKxU2r3o8DgKlmL/Ejewc/nwKwkPvBSHIGIB0quF+51CViZ9QD+Y KCuAWmN6UQHt2uukxqSn4W4t25/QSjm+dBfPF9cTeXA7kLszxMWPpRYuvbcT4Kd9 zqlQ4y9N5N5FKQ== -----END CERTIFICATE-----Generated at Sat Dec 20 21:22:17 2025 by rpki-client